Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/8FD49B16BAE411EE9198A471C4F9AE02.roa
File:                     8FD49B16BAE411EE9198A471C4F9AE02.roa (raw, json)
Hash identifier:          L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=
Subject key identifier:   29:B6:13:24:61:E1:A5:0C:29:9A:40:5A:C4:21:17:5B:37:2B:75:CF
Certificate issuer:       /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial:       DC
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/8FD49B16BAE411EE9198A471C4F9AE02.roa
Signing time:             Sat 15 Mar 2025 04:50:51 +0000
ROA not before:           Sat 15 Mar 2025 04:50:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     138548
IP address blocks:        2401:7960::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851
        Validity
            Not Before: Mar 15 04:50:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67d5072b-6b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:69:c3:3c:18:04:02:02:55:6c:71:f2:1d:
                    04:46:b5:66:3e:76:7d:06:91:f7:cf:cd:22:22:48:
                    77:76:2b:2b:bb:18:6c:a0:7d:bd:e1:6f:81:8b:03:
                    ee:62:69:f1:f4:16:48:02:fc:5c:a7:32:80:6d:c6:
                    15:c6:04:30:9c:49:c3:db:93:80:a6:40:d8:42:35:
                    9f:79:8f:09:5d:b4:fa:52:dc:54:84:0a:12:bc:ce:
                    6c:5a:30:85:53:61:07:e8:18:db:65:19:6f:48:7d:
                    e4:a8:f4:6c:d1:fe:3a:a8:45:2f:4f:ef:9f:dc:6c:
                    f0:14:1c:61:bc:38:43:07:bc:3b:a3:23:ea:73:27:
                    44:d8:14:a5:6c:df:ad:6e:81:6a:a2:89:99:85:2f:
                    e9:52:5e:78:3c:7d:ae:56:6f:df:5b:09:c8:8a:95:
                    1c:9d:3c:81:ae:0a:c0:c4:23:f0:cd:55:d6:9f:f2:
                    ec:b9:6e:ae:d4:89:11:ba:e1:5a:90:8b:66:e3:1d:
                    b6:c0:f5:82:6f:1d:d0:19:2b:23:12:6d:9b:ac:c3:
                    78:7d:2d:9c:d8:c0:d1:7c:16:19:2e:3c:ab:f8:96:
                    00:3e:81:26:e5:75:7e:06:cb:2c:b5:0a:24:9c:e9:
                    40:d5:45:13:0d:40:1c:07:15:df:aa:0e:ba:86:f6:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B6:13:24:61:E1:A5:0C:29:9A:40:5A:C4:21:17:5B:37:2B:75:CF
            X509v3 Authority Key Identifier:
                keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/8FD49B16BAE411EE9198A471C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7960::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:1a:a6:45:fa:cf:ed:a7:86:dc:47:32:58:08:21:62:a8:
         4a:94:06:5a:51:7c:f0:72:69:05:01:17:64:67:e6:a5:f2:fd:
         5d:be:ec:0c:3e:77:60:23:cb:1c:fd:f2:4a:13:e1:cc:45:d8:
         8c:49:2c:89:2b:16:f2:c5:21:95:f9:85:6c:b8:fe:b1:04:ca:
         93:03:95:18:9b:77:98:d7:4b:08:98:94:d6:da:e6:b0:ff:e1:
         7c:04:0a:f0:6c:00:9a:b3:44:02:ba:33:98:ec:ce:b6:2e:ff:
         78:f1:0a:36:ca:09:8b:91:79:b1:e0:f4:5f:f4:44:67:0b:2f:
         97:af:d6:78:a9:e8:47:f5:da:14:a7:dc:ab:dd:56:26:fa:37:
         4a:88:2e:d3:df:c7:ce:c9:15:c3:bd:90:72:99:0a:55:5f:bc:
         3a:f6:b0:00:18:f9:54:7c:5f:bd:57:43:13:c3:41:0e:7e:a0:
         b0:5d:4c:05:b0:e3:5c:37:f3:37:e6:21:ff:da:c4:92:9f:d5:
         1a:89:3c:1b:23:ba:91:02:48:2f:92:14:1c:81:95:68:a5:a4:
         d0:66:f8:1c:b3:e5:0b:64:33:b7:07:18:06:1f:0e:2e:21:81:
         59:8d:e6:59:f7:85:2c:c8:8f:ff:4c:33:4e:6b:df:11:96:62:
         04:4c:13:8d
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND
NEI0Qzg5NjgwHhcNMjUwMzE1MDQ1MDUxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q1MDcyYi02YjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrtpwzwYBAICVWxx8h0ERrVmPnZ9BpH3z80iIkh3disruxhsoH294W+BiwPu
Ymnx9BZIAvxcpzKAbcYVxgQwnEnD25OApkDYQjWfeY8JXbT6UtxUhAoSvM5sWjCF
U2EH6BjbZRlvSH3kqPRs0f46qEUvT++f3GzwFBxhvDhDB7w7oyPqcydE2BSlbN+t
boFqoomZhS/pUl54PH2uVm/fWwnIipUcnTyBrgrAxCPwzVXWn/LsuW6u1IkRuuFa
kItm4x22wPWCbx3QGSsjEm2brMN4fS2c2MDRfBYZLjyr+JYAPoEm5XV+BssstQok
nOlA1UUTDUAcBxXfqg66hvbCdwIDAQABo4ICljCCApIwHQYDVR0OBBYEFCm2EyRh
4aUMKZpAWsQhF1s3K3XPMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5
REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkE4NTEvOTVBNjExOUNCOURGMTFFRTk0QjQyNDJBQzRGOUFFMDIvOEZENDlCMTZC
QUU0MTFFRTkxOThBNDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAXlgMA0GCSqGSIb3DQEBCwUAA4IBAQBFwxqmRfrP7aeG
3EcyWAghYqhKlAZaUXzwcmkFARdkZ+al8v1dvuwMPndgI8sc/fJKE+HMRdiMSSyJ
KxbyxSGV+YVsuP6xBMqTA5UYm3eY10sImJTW2uaw/+F8BArwbACas0QCujOY7M62
Lv948Qo2ygmLkXmx4PRf9ERnCy+Xr9Z4qehH9doUp9yr3VYm+jdKiC7T38fOyRXD
vZBymQpVX7w69rAAGPlUfF+9V0MTw0EOfqCwXUwFsONcN/M35iH/2sSSn9UaiTwb
I7qRAkgvkhQcgZVopaTQZvgcs+ULZDO3BxgGHw4uIYFZjeZZ94UsyI//TDNOa98R
lmIETBON
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:42:54 2025 by rpki-client